>For the restore script we need something a little more refined > >first do > >iptables input -L > >to get a list of rules in effect, then make a script implementing all of >those rules and head it with a Flush > >iptables input -F >input rules... >input rules .... > >This restores the rules without the DROP.
You could, of course, implement your base rules in /etc/sysconfig/iptables, then do an '/etc/rc.d/init.d/iptables restart' to clear out the 'blocking' rules. (or at least, you can do that with ipchains, not sure if iptables has a 'global' rules file.) Michael -- Michael Viron Registered Linux User #81978 Senior Systems & Administration Consultant Web Spinners, University of West Florida
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
